Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/b8a3380b-0f23-37e7-b36c-aff5adf2c4aa.roa
File:                     b8a3380b-0f23-37e7-b36c-aff5adf2c4aa.roa (raw, json)
Hash identifier:          rVusDr4N0nQDo752zhvckz4XBpUnp+sZGIMFYRArbWY=
Subject key identifier:   71:E9:EC:8B:4F:92:BF:3B:BF:50:E2:84:B4:8E:BC:E0:99:D4:E0:53
Certificate issuer:       /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Certificate serial:       010D0C9F4328584ACE0BA059A2F50B4E43F85200
Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/b8a3380b-0f23-37e7-b36c-aff5adf2c4aa.roa
Signing time:             Sun 10 Aug 2025 01:00:32 +0000
ROA not before:           Sun 10 Aug 2025 01:00:32 +0000
ROA not after:            Sat 08 Nov 2025 02:00:32 +0000
asID:                     31919
IP address blocks:        2604:b080:8000::/33 maxlen: 33
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ce:0b:a0:59:a2:f5:0b:4e:43:f8:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
        Validity
            Not Before: Aug 10 01:00:32 2025 GMT
            Not After : Nov  8 02:00:32 2025 GMT
        Subject: CN=09ffdd18-661a-46f4-950c-064975e3fdcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:34:1b:dc:f8:20:c9:1b:6b:8e:7d:b8:05:
                    b7:40:37:fd:0c:8f:6f:88:ac:8c:c2:cb:ec:f1:bd:
                    8d:b2:71:95:9c:9c:15:d1:d1:f3:95:7d:8c:de:2c:
                    23:cb:71:2e:3c:35:c5:d8:96:7d:2b:25:b2:09:b5:
                    b7:d6:b7:14:7b:90:8b:44:0b:5e:8d:59:4d:ae:25:
                    6d:04:c9:43:2d:9f:4d:9f:fa:80:c1:24:9f:9e:83:
                    75:f5:0a:50:90:6e:d4:dd:83:1c:90:72:29:0c:7c:
                    e6:0b:af:11:2c:33:e9:29:dd:80:df:02:8a:5e:d3:
                    90:f9:db:5d:a6:28:1f:39:0c:df:53:ab:c4:f8:bd:
                    19:75:fe:5b:d3:52:a5:f6:cd:fe:ff:72:28:66:40:
                    9f:27:e8:f1:30:a5:ac:e4:e1:ea:94:c9:a3:8d:24:
                    6c:2d:1a:f7:e2:1e:36:ae:8d:87:7e:ef:f5:50:1d:
                    43:3b:4c:25:f1:51:c8:8c:c9:0e:8d:18:98:2d:b5:
                    29:a1:73:78:38:e2:42:5e:05:ef:a4:66:39:42:d5:
                    73:ca:fa:b3:8f:bf:bf:32:63:2c:e0:45:c2:29:b9:
                    cf:e6:e5:9a:9e:7e:30:8c:d1:4d:13:94:d2:9d:e9:
                    fb:03:26:4b:47:9c:7f:8b:95:fa:a7:91:87:01:ac:
                    07:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E9:EC:8B:4F:92:BF:3B:BF:50:E2:84:B4:8E:BC:E0:99:D4:E0:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/b8a3380b-0f23-37e7-b36c-aff5adf2c4aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2604:b080:8000::/33

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:91:23:47:ab:a3:25:32:d8:c5:c7:18:6e:cd:bd:ce:97:e9:
         27:7b:b5:fb:69:18:d3:3e:ae:d7:d9:55:f0:ba:fb:54:2e:d5:
         a8:31:ca:4e:16:bb:16:ac:f6:7e:b4:25:d7:80:76:74:c9:79:
         9d:f2:be:2e:fc:d7:a2:26:b8:ae:a0:43:c2:bf:a6:35:f2:78:
         4a:00:a3:c9:b9:6f:e5:f6:c0:d7:55:07:80:67:ea:c0:5d:0f:
         72:d7:1e:01:ff:dc:c2:76:34:e3:a6:fb:89:93:a0:f4:0c:b4:
         f5:f2:f3:cd:df:40:70:ab:32:c7:45:85:08:3c:21:a0:b9:34:
         50:bb:cb:8d:06:84:e8:c0:87:67:16:59:ac:f0:cf:20:0f:3c:
         ce:aa:d2:b1:73:37:84:56:fe:da:1f:2d:63:88:b9:1b:2c:44:
         8c:28:9e:92:68:43:be:1a:ea:4b:02:4a:0b:c4:1e:b5:1f:30:
         08:bd:e6:88:4b:9a:5d:e7:89:1a:75:a4:ef:22:75:03:c8:1b:
         4f:15:63:fa:e3:81:7b:ae:58:c1:2a:7e:a4:8a:3e:72:d2:f2:
         89:9f:a9:56:c0:a6:e6:df:15:bf:59:d8:fb:78:24:7a:99:a1:
         fc:8b:be:81:c9:cd:40:b4:81:45:dc:63:6f:60:eb:70:05:ef:
         47:60:52:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:32:42 2025 by rpki-client